Question 1

What term can be described as a function of threats,consequences of those threats,and the resulting vulnerabilities?

Accepted Answer

A)  threat
B)  mitigation
C)  risk
D)  managementE) C) and D)
F) B) and C)

Question 2

What are the two risk calculation formulas commonly used to calculate expected losses?

Accepted Answer

The Single Loss Expectancy (SLE)is the e...

Question 3

What is a risk register?

Accepted Answer

A risk register is a list of potential t...

Question 4

Why should authorization be obtained for penetration testing and vulnerability testing?

Accepted Answer

A penetration or vulnerability test is a...

Question 5

What type of learner tends to sit in the middle of the class and learns best through lectures and discussions?

Accepted Answer

A)  visual
B)  auditory
C)  kinesthetic
D)  spatialE) None of the above
F) All of the above B

Question 6

The FIT calculation is another way of reporting MTTF.

Accepted Answer

A) True 
 B)False

Question 7

Select the specific type of interview that is usually conducted when an employee leaves the company?

Accepted Answer

A)  last interview
B)  initial interview
C)  exit interview
D)  post interviewE) All of the above
F) B) and D)

Question 8

What is privilege management?

Accepted Answer

Privilege management is the process of assigning and revoking privileges to objects;that is,it covers the procedures of managing object authorizations.

Question 9

What is mean time to recovery (MTTR)?

Accepted Answer

MTTR is the average amount of ...

Question 10

A collection of suggestions that should be implemented is referred to as a:

Accepted Answer

A)  security policy
B)  baseline
C)  guideline
D)  security procedureE) A) and B)
F) All of the above

Question 11

A physical control attempts to discourage security violations before they occur.

Accepted Answer

A) True 
 B)False

Question 12

Which of the following is a basic measure of reliability for systems that cannot be repaired?

Accepted Answer

A)  mean time to recovery
B)  mean time to failure
C)  mean time to operate
D)  failure in timeE) All of the above
F) B) and C)

Question 13

Websites that group individuals and organizations into clusters or groups based on some sort are considered to be what type of networks?

Accepted Answer

A)  social media network
B)  social engineering network
C)  social management network
D)  social control networkE) A) and B)
F) All of the above

Question 14

Which of the following is considered to be a common security issue? (Choose all that apply. )

Accepted Answer

A)  management issues
B)  certificate issues
C)  encrypted credentials
D)  authentication issuesE) B) and D)
F) A) and B)

Question 15

Distributive allocation refers to "eliminating" the risk.

Accepted Answer

A) True 
 B)False

Question 16

Contrast the difference between a pedagogical approach versus an andragogical approach to subject matter.

Accepted Answer

In a pedagogical approach,the subject matter is defined by what the teacher wants to give.In an andragogical approach,learning is organized around situations in life or at work.

Question 17

Select the option that best describes a policy:

Accepted Answer

A)  A collection of requirements specific to the system or procedure that must be met by everyone
B)  A collection of suggestions that should be implemented
C)  A list of all items that have a positive economic value
D)  A document that outlines specific requirements or rules that must be metE) All of the above
F) B) and C)

Question 18

Many cloud providers allow customers to perform penetration tests and vulnerability scans without permission and whenever is necessary.

Accepted Answer

A) True 
 B)False

Question 19

Explain how continuous monitoring can benefit an IT enterprise's operations.

Accepted Answer

Continuous monitoring allows for a conti...

Question 20

What describes an agreement between two or more parties and demonstrates a "convergence of will" between the parties?so that they can work together?

Accepted Answer

A)  MOU
B)  NDA
C)  BPA
D)  ISAE) None of the above
F) B) and D)

Exam 15: Risk Mitigation

What term can be described as a function of threats,consequences of those threats,and the resulting vulnerabilities?

Correct AnswerverifiedShow Answer

What are the two risk calculation formulas commonly used to calculate expected losses?

Correct AnswerverifiedThe Single Loss Expectancy (SLE)is the e...View AnswerShow Answer

What is a risk register?

Correct AnswerverifiedA risk register is a list of potential t...View AnswerShow Answer

Why should authorization be obtained for penetration testing and vulnerability testing?

Correct AnswerverifiedA penetration or vulnerability test is a...View AnswerShow Answer

What type of learner tends to sit in the middle of the class and learns best through lectures and discussions?

Correct AnswerverifiedB

The FIT calculation is another way of reporting MTTF.

Correct AnswerverifiedShow Answer

Select the specific type of interview that is usually conducted when an employee leaves the company?

Correct AnswerverifiedShow Answer

What is privilege management?

Correct AnswerverifiedPrivilege management is the process of assigning and revoking privileges to objects;that is,it covers the procedures of managing object authorizations.

What is mean time to recovery (MTTR)?

Correct AnswerverifiedMTTR is the average amount of ...View AnswerShow Answer

A collection of suggestions that should be implemented is referred to as a:

Correct AnswerverifiedShow Answer

A physical control attempts to discourage security violations before they occur.

Correct AnswerverifiedShow Answer

Which of the following is a basic measure of reliability for systems that cannot be repaired?

Correct AnswerverifiedShow Answer

Websites that group individuals and organizations into clusters or groups based on some sort are considered to be what type of networks?

Correct AnswerverifiedShow Answer

Which of the following is considered to be a common security issue? (Choose all that apply. )

Correct AnswerverifiedShow Answer

Distributive allocation refers to "eliminating" the risk.

Correct AnswerverifiedShow Answer

Contrast the difference between a pedagogical approach versus an andragogical approach to subject matter.

Correct AnswerverifiedIn a pedagogical approach,the subject matter is defined by what the teacher wants to give.In an andragogical approach,learning is organized around situations in life or at work.

Select the option that best describes a policy:

Correct AnswerverifiedShow Answer

Many cloud providers allow customers to perform penetration tests and vulnerability scans without permission and whenever is necessary.

Correct AnswerverifiedShow Answer

Explain how continuous monitoring can benefit an IT enterprise's operations.

Correct AnswerverifiedContinuous monitoring allows for a conti...View AnswerShow Answer

What describes an agreement between two or more parties and demonstrates a "convergence of will" between the parties?so that they can work together?

Correct AnswerverifiedShow Answer

Correct Answer
verified

Correct Answer
verified
The Single Loss Expectancy (SLE)is the e...
View Answer

Correct Answer
verified
A risk register is a list of potential t...
View Answer

Correct Answer
verified
A penetration or vulnerability test is a...
View Answer

Correct Answer
verified
B

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified
Privilege management is the process of assigning and revoking privileges to objects;that is,it covers the procedures of managing object authorizations.

Correct Answer
verified
MTTR is the average amount of ...
View Answer

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified
In a pedagogical approach,the subject matter is defined by what the teacher wants to give.In an andragogical approach,learning is organized around situations in life or at work.

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified
Continuous monitoring allows for a conti...
View Answer

Correct Answer
verified